CDH4 Documentation

User Admin

The User Admin application lets an administrator add, delete, and manage Hue user accounts and groups, and
configure group permissions. The permissions allow users, based on their group membership, to launch Hue
applications and use application features. You can add users and groups individually, or import them from an LDAP
directory.

Starting User Admin

To start User Admin:

Click the User Admin icon ( ) in the navigation bar at the
top of the Hue browser page.

Working with User Accounts

Superusers — The first user who logs into Hue after its initial installation becomes the
first superuser. Superusers have permissions to perform administrative functions:

add and delete users

add and delete groups

assign permissions to groups

change a user into a superuser

import users and groups from an LDAP server

Users — can change their name, e-mail address, and password and log in to Hue
and run Hue applications, subject to the permissions provided by the Hue groups
to which they belong.

Adding a User Account

To add a user account:

In the User Admin page, click Add User.

In the Add User dialog box, add information about the user. The
following table describes the options in the Add User dialog
box.

User Account Option

Description

Username

A user name that contains only letters, numbers, and underscores; blank spaces are not allowed
and the name cannot begin with a number. The user name is used to log into Hue and in file
permissions and job submissions. This is a required field.

Password and Password confirmation

A password for the user. This is a required field.

First name and Last name

The user's first and last name.

E-mail address

The user's e-mail address. The e-mail address is used by the Job Designer and Beeswax
applications to send users an e-mail message after certain actions have occurred. The Job
Designer sends an e-mail message after a user's job has completed. Beeswax sends a message after
a query has completed. If an e-mail address is not specified, the application will not attempt
to email the user.

Groups

The groups to which the user belongs. By default, a user is assigned to the default
group, which allows access to all applications. See
Managing Application Permissions.

Active

Indicate that the user account is enabled and the user is allowed to log in.

Create home directory

Create a directory named /user/<Username> in HDFS. For non-superusers, the user and group
of the directory are <Username>. For superusers, the user and group are <Username>
and supergroup.

Superuser status

Assign superuser privileges to the user.

Click Save to save the information you specified and close the Add
User dialog box.

Deleting a User Account

To delete a user account:

Select Delete in the row with the user name.

Click Ok to confirm.

Editing a User Account

To edit a user account:

Double-click the user account you want to edit in the Hue Users list,
or Select Edit in the row with the user name.

Make the changes to the user account and then click Save.

Importing Users from an LDAP Directory

Hue must be configured to use an external LDAP directory (OpenLDAP or Active Directory). See
Hue Installation.

Note:

Importing users from an LDAP directory does not import any password information. You must add passwords
manually in order for a user to log in.

To add a user from an external LDAP directory:

Click Add/sync LDAP user.

In the Add or Sync a LDAP user dialog, type the user name in the Username
field.

Check the Distinguished Name checkbox to use a full
distinguished name for the user. This imports the user's first and
last name, username, and email, but does not store the user
password.

If the user already exists in the User Admin, this will sync the
user information in User Admin with what is currently in the LDAP
directory.

Syncing Users and Groups with an LDAP Directory

You can sync the Hue user database with the current state of the LDAP directory using the Sync LDAP
users/groups function. This will update the user/group information for the already imported users and
groups. It does not import any new users or groups.

Click Sync LDAP users/groups.

In the Sync LDAP users and groups dialog, click Sync to
perform the sync.

Working with Groups

Superusers can add groups, delete the groups they have created, configure group permissions, and assign users to
group memberships.

Adding a Group

You can add groups, and delete the groups you've added. You can also import groups from an LDAP directory.

To add a group:

In the User Admin window, click Groups and then click Add
Group.

In the Add Group dialog box, specify a name for the group. Group
names can only be letters, numbers, and underscores; blank spaces are not
allowed.

To add users to the group, check the names in the list provided or check
Select All.

Click Save to save the information you specified and close the Add
Group dialog box.

Adding Users to a Group

In the User Admin window, click Groups.

In the Groups list, click the Edit button.

To add users to the group, check the names in the list provided or check
Select All.

Deleting a Group

To delete a group:

Click Groups to view the Groups list.

Click the Delete button to the right of the group you want to
delete.

Click Yes to confirm.

Editing a Group

You can add and remove users, and create subgroups for groups created manually in Authorization Manager.

To edit a group:

Click Groups to view the Groups list.

Click the Edit button to the right of the group you want to
modify.

Make the changes for the group and then click Save.

Importing Groups from an LDAP Directory

To add a group from an external LDAP directory:

From the Groups tab, click Add/sync LDAP group.

In the Add or Sync a LDAP group dialog, type the group name in the Name
field.

Check the Distinguished Name checkbox to use a full
distinguished name.

Check Import new members to also import the members of the
group. or the group.

Managing Application Permissions

Permissions for Hue applications are granted to groups, with users gaining permissions based on their group
membership. Superusers can assign or remove permissions from groups, including groups imported from LDAP.

Group permissions define the applications within Hue that group members are allowed to launch, and the features
they can use.

To assign or change Hue application permissions:

Click Permissions.

Click the Edit button next to the application for which you want to
assign permissions.

Select the Groups you want to have permission for the application. You can check
Select All to select all groups.

Click Save. The new groups will appear in the Groups column in the Hue
Permissions list.